Skip to content

Commit d850b7b

Browse files
dloewen2github-actions[bot]
dloewen2
and
github-actions[bot]
authored
[keycloak] replace deprecated 'proxy' with new proxy parameters (CloudPirates-io#183)
* [keycloak] replace start-parameter 'proxy' with 'proxyheaders', 'proxyProtocolEnabled', 'proxyTrustedAddresses' * Update CHANGELOG.md Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> --------- Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
1 parent 6385512 commit d850b7b

File tree

6 files changed

+54
-30
lines changed

6 files changed

+54
-30
lines changed

‎charts/keycloak/CHANGELOG.md‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,12 @@
11
# Changelog
22

3-
## 0.1.6 (2025-09-26)
3+
## 0.1.7 (2025-09-29)
44

5-
* [postgres] chore(deps): update postgres:17.6 Docker digest to 0b6428e ([#162](https://github.com/CloudPirates-io/helm-charts/pull/162))
5+
* [keycloak] replace deprecated 'proxy' with new proxy parameters ([#183](https://github.com/CloudPirates-io/helm-charts/pull/183))
6+
7+
## <small>0.1.6 (2025-09-26)</small>
8+
9+
* [postgres] chore(deps): update postgres:17.6 Docker digest to 0b6428e (#162) ([6293612](https://github.com/CloudPirates-io/helm-charts/commit/6293612)), closes [#162](https://github.com/CloudPirates-io/helm-charts/issues/162)
610

711
## <small>0.1.5 (2025-09-25)</small>
812

‎charts/keycloak/Chart.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ apiVersion: v2
22
name: keycloak
33
description: Open Source Identity and Access Management Solution
44
type: application
5-
version: 0.1.6
5+
version: 0.1.7
66
appVersion: "26.3.4"
77
keywords:
88
- keycloak

‎charts/keycloak/README.md‎

Lines changed: 22 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -113,21 +113,23 @@ The following table lists the configurable parameters of the Keycloak chart and
113113

114114
### Keycloak Configuration
115115

116-
| Parameter | Description | Default |
117-
| -------------------------------------- | ------------------------------------------------------------- | ------------------ |
118-
| `keycloak.adminUser` | Keycloak admin username | `admin` |
119-
| `keycloak.adminPassword` | Keycloak admin password | `""` |
120-
| `keycloak.existingSecret` | Name of existing secret to use for Keycloak admin credentials | `""` |
121-
| `keycloak.secretKeys.adminPasswordKey` | Secret key for admin credentials | `"admin-password"` |
122-
| `keycloak.hostname` | Keycloak hostname | `""` |
123-
| `keycloak.hostnameAdmin` | Keycloak admin hostname | `""` |
124-
| `keycloak.hostnameStrict` | Enable strict hostname resolution | `false` |
125-
| `keycloak.hostnameBackchannel` | Keycloak backchannel hostname | `""` |
126-
| `keycloak.httpEnabled` | Enable HTTP listener | `true` |
127-
| `keycloak.httpPort` | HTTP port | `8080` |
128-
| `keycloak.httpsPort` | HTTPS port | `8443` |
129-
| `keycloak.proxy` | Proxy mode (edge, reencrypt, passthrough, none) | `none` |
130-
| `keycloak.production` | Enable production mode | `false` |
116+
| Parameter | Description | Default |
117+
| -------------------------------------- | ------------------------------------------------------------------------------------------------------------ | ------------------ |
118+
| `keycloak.adminUser` | Keycloak admin username | `admin` |
119+
| `keycloak.adminPassword` | Keycloak admin password | `""` |
120+
| `keycloak.existingSecret` | Name of existing secret to use for Keycloak admin credentials | `""` |
121+
| `keycloak.secretKeys.adminPasswordKey` | Secret key for admin credentials | `"admin-password"` |
122+
| `keycloak.hostname` | Keycloak hostname | `""` |
123+
| `keycloak.hostnameAdmin` | Keycloak admin hostname | `""` |
124+
| `keycloak.hostnameStrict` | Enable strict hostname resolution | `false` |
125+
| `keycloak.hostnameBackchannel` | Keycloak backchannel hostname | `""` |
126+
| `keycloak.httpEnabled` | Enable HTTP listener | `true` |
127+
| `keycloak.httpPort` | HTTP port | `8080` |
128+
| `keycloak.httpsPort` | HTTPS port | `8443` |
129+
| `keycloak.proxyHeaders` | The proxy headers that should be accepted by the server. (forwarded, xforwarded) | `""` |
130+
| `keycloak.proxyProtocolEnabled` | Whether the server should use the HA PROXY protocol when serving requests from behind a proxy. (true, false) | `false` |
131+
| `keycloak.proxyTrustedAddresses` | A comma separated list of trusted proxy addresses | `""` |
132+
| `keycloak.production` | Enable production mode | `false` |
131133

132134
### Database Configuration
133135

@@ -240,10 +242,10 @@ The following table lists the configurable parameters of the Keycloak chart and
240242

241243
### Extra Environment
242244

243-
| Parameter | Description | Default |
244-
| ---------- |------------------------------------------------------------------------| ----- |
245-
| `extraEnv` | Additional environment variables from key-value pairs | `{}` |
246-
| `extraEnvVarsSecret` | Name of an existing secret containing additional environment variables | `` |
245+
| Parameter | Description | Default |
246+
| -------------------- | ---------------------------------------------------------------------- | ------- |
247+
| `extraEnv` | Additional environment variables from key-value pairs | `{}` |
248+
| `extraEnvVarsSecret` | Name of an existing secret containing additional environment variables | `` |
247249

248250
### Extra Configuration Parameters
249251

@@ -271,7 +273,7 @@ The following table lists the configurable parameters of the Keycloak chart and
271273

272274
| Parameter | Description | Default |
273275
| --------------------------- | ------------------------------------------------- | ------------ |
274-
| `mariadb.enabled` | Enable embedded PostgreSQL database | `false` |
276+
| `mariadb.enabled` | Enable embedded PostgreSQL database | `false` |
275277
| `mariadb.auth.database` | MariaDB database name | `"keycloak"` |
276278
| `mariadb.auth.username` | MariaDB database user (leave empty for root user) | `""` |
277279
| `mariadb.auth.password` | MariaDB database password | `""` |

‎charts/keycloak/templates/deployment.yaml‎

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -77,8 +77,14 @@ spec:
7777
{{- if .Values.keycloak.hostnameBackchannel }}
7878
- --hostname-backchannel={{ include "keycloak.hostnameBackchannel" . }}
7979
{{- end }}
80-
{{- if ne .Values.keycloak.proxy "none" }}
81-
- --proxy={{ .Values.keycloak.proxy }}
80+
{{- if .Values.keycloak.proxyHeaders }}
81+
- --proxy-headers={{ .Values.keycloak.proxyHeaders }}
82+
{{- end }}
83+
{{- if .Values.keycloak.proxyProtocolEnabled }}
84+
- --proxy-protocol-enabled={{ .Values.keycloak.proxyProtocolEnabled }}
85+
{{- end }}
86+
{{- if .Values.keycloak.proxyTrustedAddresses }}
87+
- --proxy-trusted-addresses={{ .Values.keycloak.proxyTrustedAddresses }}
8288
{{- end }}
8389
{{- if .Values.keycloak.httpPort }}
8490
- --http-port={{ .Values.keycloak.httpPort }}

‎charts/keycloak/values.schema.json‎

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -171,10 +171,18 @@
171171
"maximum": 65535,
172172
"description": "HTTPS port"
173173
},
174-
"proxy": {
174+
"proxyHeaders": {
175175
"type": "string",
176-
"enum": ["edge", "reencrypt", "passthrough", "none"],
177-
"description": "Proxy mode (edge, reencrypt, passthrough, none)"
176+
"enum": ["", "forwarded", "xforwarded"],
177+
"description": "The proxy headers that should be accepted by the server. (forwarded, xforwarded)"
178+
},
179+
"proxyProtocolEnabled": {
180+
"type": "boolean",
181+
"description": "Whether the server should use the HA PROXY protocol when serving requests from behind a proxy."
182+
},
183+
"proxyTrustedAddresses": {
184+
"type": "string",
185+
"description": "A comma separated list of trusted proxy addresses"
178186
},
179187
"production": {
180188
"type": "boolean",

‎charts/keycloak/values.yaml‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -82,8 +82,12 @@ keycloak:
8282
httpPort: 8080
8383
## @param keycloak.httpsPort HTTPS port
8484
httpsPort: 8443
85-
## @param keycloak.proxy Proxy mode (edge, reencrypt, passthrough, none)
86-
proxy: none
85+
## @param keycloak.proxyHeaders The proxy headers that should be accepted by the server. (forwarded, xforwarded)
86+
proxyHeaders: ""
87+
## @param keycloak.proxyProtocolEnabled Whether the server should use the HA PROXY protocol when serving requests from behind a proxy. (true, false(default))
88+
proxyProtocolEnabled: false
89+
## @param keycloak.proxyTrustedAddresses A comma separated list of trusted proxy addresses
90+
proxyTrustedAddresses: ""
8791
## @param keycloak.production Enable production mode
8892
production: false
8993

0 commit comments

Comments
 (0)